Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: qM281RE+FjM4bf7fd1Vwj0MQm90Yz307p4jI93PqlEk=
Subject key identifier: BA:9C:70:A1:EF:6E:CA:09:6A:16:52:94:3B:2F:62:17:D9:22:EA:A2
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 0196BBFFE3C795183301921F13F489A92A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 0221
Signing time: Sat 10 May 2025 21:00:31 +0000
Manifest this update: Sat 10 May 2025 21:00:31 +0000
Manifest next update: Sun 11 May 2025 21:00:31 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: dp2nEgGbrkGROkeNvHnhUObU99pvlU9sxD8kAyCo/m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:e3:c7:95:18:33:01:92:1f:13:f4:89:a9:2a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: May 10 21:00:31 2025 GMT
Not After : May 11 21:00:31 2025 GMT
Subject: CN=ba9c70a1ef6eca096a1652943b2f6217d922eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:7a:0a:a4:36:21:c9:4a:78:be:0c:1a:c6:
c9:3e:0d:93:db:f4:b3:ec:1a:5c:e9:4d:bd:fd:92:
39:20:5f:08:c8:b8:88:00:7c:35:9a:c9:66:00:c4:
37:df:88:d4:36:ad:6d:b4:6b:10:a1:e3:c2:34:e7:
80:62:bc:81:9b:a9:28:07:3e:79:58:5a:ec:fc:b9:
bc:f8:c7:a7:78:7e:33:af:d2:21:26:a5:5e:23:39:
a4:1e:2b:ac:9d:e0:b7:82:cf:cc:3b:63:4d:b7:5d:
39:0f:b1:86:be:76:c1:1d:43:76:22:b2:7e:71:70:
88:51:e7:c1:e1:8a:1f:62:8c:81:5a:40:49:8f:2c:
6f:f9:29:48:3c:bc:75:14:b1:20:9e:84:e7:1f:2b:
4a:d3:3b:62:96:7b:6b:e7:18:55:ec:d7:e8:c6:40:
71:96:9e:56:ad:e1:b3:52:79:e7:2d:01:31:1c:64:
8b:1a:7c:18:39:d2:d0:90:7e:9d:d8:96:42:b1:d4:
a0:4f:bf:aa:d1:cb:ab:e3:cc:5d:2d:c8:38:40:c3:
b6:48:31:58:b6:54:58:14:7f:a0:35:a7:8c:14:38:
c2:af:54:44:d4:be:42:86:92:74:51:11:ab:4e:6f:
65:1f:f1:5a:43:5e:d5:68:74:3e:cc:6a:6d:b4:02:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:70:A1:EF:6E:CA:09:6A:16:52:94:3B:2F:62:17:D9:22:EA:A2
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:93:76:20:70:c3:27:5b:b3:a7:20:ad:3c:cc:7f:35:14:
15:af:03:4b:3e:90:de:99:b9:08:50:20:77:b4:2a:31:72:43:
58:96:45:ae:4b:82:0b:a6:da:13:08:16:0b:b3:ec:cd:64:71:
b1:47:9a:d1:bd:04:b7:fb:c1:76:5d:d5:b5:98:fb:16:b4:f0:
ec:ea:4e:5a:1e:dc:55:4e:7c:d6:86:b9:bd:bd:1e:56:b5:3b:
a3:e3:04:25:ed:b9:b8:56:86:6e:3c:40:88:7d:66:2b:90:18:
be:57:d3:5b:d2:78:1b:8d:a9:8d:d8:11:80:8e:e6:9d:09:e3:
d8:55:d9:fd:da:ae:cb:3a:ff:24:8a:8b:4f:38:10:bc:08:95:
ca:a5:d8:51:48:6e:db:8b:39:ee:23:81:3b:45:f7:33:d8:9c:
f2:b1:f1:3d:78:4d:4c:58:fa:0d:85:6e:0e:f4:02:32:d0:05:
37:b4:28:61:0c:40:c9:1c:9e:aa:7c:75:68:01:5e:6e:19:b1:
0c:e3:90:e7:89:33:0e:43:01:16:39:c9:a9:f0:e6:bf:ef:a6:
dd:70:9b:a5:af:d7:f3:9a:88:f9:4b:46:be:f8:1d:4c:fe:f5:
3a:7b:82:1c:76:28:0b:6c:75:c2:e3:b2:c0:89:5d:4b:5a:56:
6f:c8:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:02:24 2025 by rpki-client